CWE-19: Data Processing Errors
Weaknesses in this category are typically found in functionality that processes data. Data processing is the manipulation of input to retrieve or save information.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeBlink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for...4.3 Medium
- google chromeBlink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for...4.3 Medium
- paloaltonetworks pan-osThe Addresses Object parser in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0...6.5 Medium
- cisco email security applianceA vulnerability in the email attachment scanning functionality of the Advanced Malware Protection...7.5 High
- linux kernelThe XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of...5.5 Medium
- linux kernelThe mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreUse-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel...9.8 Critical
- nodejs node.js, suse linux enterprise +1 moreThe tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x...5.9 Medium
- ibm websphere mqIBM WebSphere MQ 7.5 before 7.5.0.7 and 8.0 before 8.0.0.5 mishandles protocol flows, which...3.1 Low
- apple iphone os, mac os x +1 moreCFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which...4.0 Medium
- libarchive, oracle linux, redhat enterprise linux desktop +7 more +9 moreThe sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non...7.5 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,...7.8 High
- google chromeSkPath.cpp in Skia, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before...8.8 High
- google chrome, opensuse leap +1 moreThe Web Animations implementation in Blink, as used in Google Chrome before 53.0.2785.89 on...8.8 High
- imagemagickcoders/rgf.c in ImageMagick before 6.9.4-10 allows remote attackers to cause a denial of service ...6.5 Medium
- google androidnetd in Android before 2016-08-05 mishandles tethering and stdio streams, which allows attackers...7.8 High
- google androiddrivers/char/diag/diagchar_core.c in the Qualcomm components in Android before 2016-08-05 on...7.8 High
- google androiddrivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in...7.8 High
- google androidinternal/app/ChooserActivity.java in the ChooserTarget service in Android 6.x before 2016-07-01...7.8 High
- google android, linux kernel +1 morearch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in...7.8 High
- welcart e-commerceThe Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows...6.5 Medium
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2,...9.8 Critical
- microsoft windows diagnostics hubThe Standard Collector service in Windows Diagnostics Hub mishandles library loading, which...7.8 High
- ntp, ntpsec +1 moreA malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win...6.5 Medium
- google androidwpa_supplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters,...7.8 High
- linux kernelThe nft_flush_table function in net/netfilter/nf_tables_api.c in the Linux kernel before 3.18.5...5.5 Medium
- ntp, ntpsec +1 moreAn attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that...7.2 High
- foxitsoftware foxit reader, phantompdf +1 moreFoxit Reader and PhantomPDF before 7.3.4 on Windows improperly report format errors recursively,...5.5 Medium
- apache camelApache Camel can allow remote attackers to execute arbitrary commands8.1 High
- juniper junosJuniper Junos OS 14.1X53 before 14.1X53-D30 on QFX Series switches allows remote attackers to...7.5 High
- juniper junosThe rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before...7.5 High
- microsoft windows 10HTTP.sys in Microsoft Windows 10 Gold and 1511 allows remote attackers to cause a denial of...7.5 High
- drupal, debian linux +1 moreDrupal arbitrary code execution8.1 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +7 more +9 moreThe Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM,...7.5 High
- hp asset manager, asset manager cloudsystem chargeback +1 moreHPE Asset Manager 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback 9.40 allow remote...9.8 Critical
- mercurial, debian linux, fedoraproject fedora +4 more +6 moreMercurial arbitrary code execution vulnerability8.8 High
- apple safari, iphone os +1 moreWebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it...4.3 Medium
- apple safariThe Downloads feature in Apple Safari before 9.1 mishandles file expansion, which allows remote...6.5 Medium
- apple safariApple Safari before 9.1 allows remote attackers to spoof the user interface via a web page that...4.3 Medium
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla...8.8 High
- mozilla firefox, sil graphite2, opensuse leap +3 more +5 moreThe graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla...8.8 High
- beanshell, canonical ubuntu linux, debian linux +2 moreImproper Input Validation in BeanShell8.1 High
- huawei mt882 firmwareThe Windows-based Host Interface Program (WHIP) service on Huawei SmartAX MT882 devices...9.8 Critical
- linux kernelThe evm_verify_hmac function in security/integrity/evm/evm_main.c in the Linux kernel before 4.5...5.5 Medium
- microsoft edge, internet explorer +1 moreMicrosoft Internet Explorer 9 through 11 and Microsoft Edge misparse HTTP responses, which allows...4.3 Medium
- google androidInteger overflow in the getCoverageFormat12 function in CmapCoverage.cpp in the Minikin library...6.2 Medium
- apache camelCamel-xstream component in Apache Camel can allow remote attackers to execute arbitrary commands9.8 Critical
- apple iphone osWebSheet in Apple iOS before 9.2.1 allows remote attackers to read or write to cookies by...5.4 Medium
- mcafee file lockMcPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows local users to...9.1 Critical
- Show moreLoading…